The 10 biggest things in tech, Mon, Aug 17
The ten biggest stories in tech today, scored 1–10 and ranked from 150+ engineering sources. Free, updated every morning.
Stripe acquires OpenRouter for $7B+
Stripe finalized a $7+ billion acquisition of OpenRouter — an AI gateway routing requests across 400+ models with 8M users — positioning Stripe as a major player in AI infrastructure alongside its payments business.
#1 · industry · scored 10/10
VMware vCenter CVE actively exploited
A Chinese-nexus APT is actively exploiting CVE-2026-59310 (CVSS 9.8) in VMware vCenter to deploy Babuk-derived ransomware and backdoors across 361 IPs in 47 countries within five days of the patch release, while a second critical macOS Screen Sharing auth bypass (CVE-2026-65400, CVSS 9.8) is being exploited for crypto miner deployment.
#2 · platform · scored 9/10
VMware vCenter CVE under active APT exploitation
A Chinese-nexus APT (QUIRSO) is actively exploiting CVE-2026-59310 (CVSS 9.8) in VMware vCenter to deploy Babuk-derived ransomware, with 361 compromised IPs across 47 countries within five days of patch release, while a second critical macOS Screen Sharing auth bypass (CVE-2026-65400, CVSS 9.8) is simultaneously being exploited for crypto miner deployment.
#3 · security · scored 9/10
AI agents exploit AI-introduced vulnerabilities
Wiz's autonomous red agent discovered and exploited a script injection vulnerability in Snowflake's GitHub Actions workflow that GitHub Copilot Autofix had itself introduced five days earlier — a closed loop where AI coding assistants create flaws and AI attackers immediately weaponize them, with broader MCP server credential risks and Black Hat discussions reinforcing the emerging agentic threat surface.
#4 · ai · scored 8/10
Dynatrace acquires Arize for AI observability
Dynatrace agreed to acquire AI observability startup Arize for $915 million, combining Arize's agent tracing and model evaluation tools with Dynatrace's infrastructure monitoring to close visibility gaps when AI agents operate alongside traditional applications.
#5 · ai · scored 8/10
DuckDB and dbt major overhauls
DuckDB v2.0 (preview) and dbt Core v1.12 both ship foundational architectural rewrites this week — DuckDB adds client/server mode, remote federation, and a new storage format, while dbt Core ships a Rust-based parser 5–10x faster as the foundation for v2.0, signaling a maturation moment for the modern data stack's core tooling.
#6 · data · scored 8/10
AI infrastructure investment accelerates
Nvidia committed $1.5 billion to SB Energy and up to $105 billion in credit to build OpenAI's 8-gigawatt Ports-Pike data center near Cincinnati — positioning itself as both sole compute supplier and financial backer — while Dynatrace agreed to acquire AI observability firm Arize for $915 million to close end-to-end visibility gaps as AI agents enter production infrastructure.
#7 · platform · scored 8/10
Linux kernel 7.2 released
Linux kernel 7.2 shipped with Cache Aware Scheduling for AMD EPYC 5 and Intel Xeon 6, Apple M3 support, and deprecation of AppleTalk and PCMCIA, with Linus Torvalds flagging an uptick in late-stage reverts driven by AI-generated contribution volume as a concern for release quality.
#8 · platform · scored 8/10
AI agents autonomously find and exploit vulns
Wiz's red agent autonomously discovered a GitHub Copilot Autofix-introduced script injection in Snowflake's GitHub Actions workflow and extracted Jira credentials without human intervention — a live demonstration of AI coding assistants introducing vulnerabilities that AI attackers can immediately exploit, while Black Hat and DEF CON sessions warned of agentic AI outpacing defenses and Microsoft attributed a delayed Exchange patch to AI-driven bug discovery overload.
#9 · security · scored 8/10
Major AI infrastructure deals close
Dynatrace agreed to acquire AI observability firm Arize for $915M, Groq raised $350M at a $3.5B valuation to pivot to neocloud, and Nvidia committed $1.5B plus $105B in credit to build OpenAI's massive Cincinnati data center — signaling a week of high-stakes consolidation and investment across the AI infrastructure stack.
#10 · industry · scored 8/10